DataSunrise Activity Monitoring

DataSunrise Activity Monitoring

 

Enables real-time tracking of user actions and changes made to databases to ensure compliance-ready environment and increased visibility into activity across multiple data silos. Comprehensive interface and flexible rules make it easy to define monitoring policies for separate database objects.

INCREASED VISIBILITY INTO DATABASE ACTIVITY

DataSunrise Activity Monitoring does:

Collects extensive information on activity of database users and client applications

Utilizes self-learning algorithms to create a white list of queries acceptable in the given database environment

Exports audit results to external SIEM systems with Syslog messages

Helps to achieve compliance with government regulations and industry standards

 

Features:

Real-time alerting about suspicious activity

Configure alerting via Email and instant messengers to send immediate notifications to administrator or security officer.

Advanced logging

DataSunrise captures SQL queries, statements, and parameters (for parameterized queries). You get a detailed picture of user activity.

SIEM integration

DataSunrise supports Syslog. This enables seamless integration with Security Information and Event anagement (SIEM) solutions.

 

Integration with a SIEM provides visual reports and in-depth analysis of user behavior.

 

CREATING COMPLIANCE REPORTS FOR GOVERNMENT AND INDUSTRY REGULATORS

DataSunrise helps to achieve and maintain compliance with data security regulations and standards such as SOX, HIPAA and PCI DSS.

Database activity monitoring

Flexibility

Configuring monitoring of user access both to the complete database and to its separate objects only.

Advanced database traffic filters enable to track incoming queries issued by certain users, from certain IP addresses and the ones which include certain SQL statements.

Real-time notifications on suspicious activity

DataSunrise enables to send notifications to database administrators and security officers via Email and various instant messengers

Stealth monitoring

DataSunrise can be configured to receive database traffic copy from a SPAN port of a network switch to perform non-intrusive auditing. Passive Mode Auditing through SPAN port produces no impact on database performance

Learning Mode

DataSunrise automatically collects information about users, applications, common queries and objects such as tables and columns and creates a white list of acceptable queries.